So this morning i decided to do a firmware check and saw 25.7.8 was available (i've been working away). Went through the process and i thought all was good, a little slower than normal but all good.
Now i tend to do 2 runs of firmware checks just because i can't help it, and it said it need to do 25.7.8 base again.
I've now run it 5-6 times and it keeps coming back with :-
***GOT REQUEST TO UPDATE***
Currently running OPNsense 25.7.8 (amd64) at Thu Nov 27 13:29:23 UTC 2025
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
Updating mimugmail repository catalogue...
Fetching meta.conf: . done
mimugmail repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
Updating mimugmail repository catalogue...
Fetching meta.conf: . done
mimugmail repository is up to date.
All repositories are up to date.
Checking for upgrades (80 candidates): .......... done
Processing candidates (80 candidates): . done
Checking integrity... done (0 conflicting)
Your packages are up to date.
Checking integrity... done (0 conflicting)
Nothing to do.
Checking all packages: .......... done
Nothing to do.
Nothing to do.
Starting web GUI...done.
Fetching base-25.7.8-amd64.txz: ..............................[fetch: transfer timed out
fetch: /var/cache/opnsense-update/89570/base-25.7.8-amd64.txz.sig appears to be truncated: 0/1332 bytes] failed, no signature found
***DONE***
I've ssh'd in to clear cache and the run the kernal and base upgrades from there, still nothing. I've tried 3 or 4 different mirrors too. Any suggestions?
Hardware appliance (Intel N100 NUC) not a VM.
Have you tried a different Mirror? You can change it under System > Firmware > Setting.
That looks as if 25.7.8 upgrade was done (potentially incomplete) and now you do not have internet access.
From what version did you start out? If it was < 25.7, see https://forum.opnsense.org/index.php?topic=48343.msg244891#msg244891
If that is your situation, you need to apply the fixes, preferably before the upgrade.
Quote from: SeeDrs on November 27, 2025, 04:33:57 PMHave you tried a different Mirror? You can change it under System > Firmware > Setting.
Thank you for the reply, yes 3 or 4 of them
Quote from: meyergru on November 27, 2025, 04:46:36 PMThat looks as if 25.7.8 upgrade was done (potentially incomplete) and now you do not have internet access.
From what version did you start out? If it was < 25.7, see https://forum.opnsense.org/index.php?topic=48343.msg244891#msg244891
If that is your situation, you need to apply the fixes, preferably before the upgrade.
I want to say 25.7.5 so i'll lok at those fixes as luckily despit it being upset i still have internet (thank the lord as she is catching up on stranger things and i don't wish to stop that lol)
UPDATE
Yes 25.7.5 as under updates it still say to update despite dashboard saying all good.
(https://image2url.com/images/1764261106767-c9c8f9fe-dd49-43e4-94f7-c5873d4aa794.png)
Can you do a connectivity audit from the firmware status page?
> truncated: 0/1332 bytes
This could happen due to long DNS timeouts for example.
Cheers,
Franco
Quote from: franco on November 27, 2025, 05:55:45 PMCan you do a connectivity audit from the firmware status page?
> truncated: 0/1332 bytes
This could happen due to long DNS timeouts for example.
Cheers,
Franco
Thanks for the reply, see below:-
***GOT REQUEST TO AUDIT CONNECTIVITY***
Currently running OPNsense 25.7.8 (amd64) at Thu Nov 27 16:57:54 UTC 2025
Checking connectivity for host: pkg.opnsense.org -> 89.149.222.99
PING 89.149.222.99 (89.149.222.99): 1500 data bytes
1508 bytes from 89.149.222.99: icmp_seq=0 ttl=58 time=14.044 ms
1508 bytes from 89.149.222.99: icmp_seq=1 ttl=58 time=13.911 ms
1508 bytes from 89.149.222.99: icmp_seq=2 ttl=58 time=14.437 ms
1508 bytes from 89.149.222.99: icmp_seq=3 ttl=58 time=14.341 ms
--- 89.149.222.99 ping statistics ---
4 packets transmitted, 4 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 13.911/14.183/14.437/0.214 ms
Checking connectivity for repository (IPv4): https://pkg.opnsense.org/FreeBSD:14:amd64/25.7
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching data.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 911 packages processed.
Updating mimugmail repository catalogue...
Fetching meta.conf: . done
Fetching data.pkg: ..... done
Processing entries: .......... done
mimugmail repository update completed. 191 packages processed.
All repositories are up to date.
Checking connectivity for host: pkg.opnsense.org -> 2001:1af8:5300:a010:1::1
PING(1548=40+8+1500 bytes) 2a02:390:feed:6120:aab8:e0ff:fe02:835 --> 2001:1af8:5300:a010:1::1
--- 2001:1af8:5300:a010:1::1 ping statistics ---
4 packets transmitted, 0 packets received, 100.0% packet loss
Checking connectivity for repository (IPv6): https://pkg.opnsense.org/FreeBSD:14:amd64/25.7
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
pkg: An error occurred while fetching package: No error
pkg: An error occurred while fetching package: No error
pkg: An error occurred while fetching package: No error
pkg: An error occurred while fetching package: No error
Unable to update repository OPNsense
Updating mimugmail repository catalogue...
pkg: An error occurred while fetching package: No error
pkg: An error occurred while fetching package: No error
repository mimugmail has no meta file, using default settings
pkg: An error occurred while fetching package: No error
pkg: An error occurred while fetching package: No error
pkg: An error occurred while fetching package: No error
pkg: An error occurred while fetching package: No error
Unable to update repository mimugmail
Error updating repositories!
Checking server certificate for host: opn-repo.routerperformance.net
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = E7
verify return:1
depth=0 CN = opn-repo.routerperformance.net
verify return:1
DONE
Checking server certificate for host: pkg.opnsense.org
depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
verify return:1
depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL TLS RSA CA G1
verify return:1
depth=0 CN = pkg.opnsense.org
verify return:1
DONE
***DONE***
It's just your IPv6 connectivity that's busted. Try System: Settings: General: check "Prefer IPv4" option.
Just chiming in to say I'm getting intermittent packet loss on the ipv6 connectivity audit. I've done 3 audit checks. The first dropped all packets. the second dropped one packet and the third didn't drop any. I had no issues updating and I don't have any ipv6 issues outside of this audit.
Quote from: franco on November 27, 2025, 07:00:03 PMIt's just your IPv6 connectivity that's busted. Try System: Settings: General: check "Prefer IPv4" option.
I've checked the Prefer IPv4 option and it's already set unfortunatly.
Did a test and only pkg.opnsense.org that doesn't want to play.
PS C:\Users\Foz> ping pkg.opnsense.org
Pinging pkg.opnsense.org [2001:1af8:5300:a010:1::1] with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 2001:1af8:5300:a010:1::1:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
PS C:\Users\Foz> ping bbc.co.uk
Pinging bbc.co.uk [2a04:4e42::81] with 32 bytes of data:
Reply from 2a04:4e42::81: time=11ms
Reply from 2a04:4e42::81: time=10ms
Reply from 2a04:4e42::81: time=9ms
Reply from 2a04:4e42::81: time=9ms
Ping statistics for 2a04:4e42::81:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 9ms, Maximum = 11ms, Average = 9ms
PS C:\Users\Foz>
Guess it's a rebuild as clearly a borked firmware
Quote from: Boxer on November 27, 2025, 07:18:20 PMJust chiming in to say I'm getting intermittent packet loss on the ipv6 connectivity audit. I've done 3 audit checks. The first dropped all packets. the second dropped one packet and the third didn't drop any. I had no issues updating and I don't have any ipv6 issues outside of this audit.
Yeah i still have internet so wife can watch netflix happily i just don't like things broken or half-ars£d lol and this telling my it installed but it still needs to install it is broken.
Quote from: Baron_Backdoor on November 27, 2025, 07:37:09 PMQuote from: Boxer on November 27, 2025, 07:18:20 PMJust chiming in to say I'm getting intermittent packet loss on the ipv6 connectivity audit. I've done 3 audit checks. The first dropped all packets. the second dropped one packet and the third didn't drop any. I had no issues updating and I don't have any ipv6 issues outside of this audit.
Yeah i still have internet so wife can watch netflix happily i just don't like things broken or half-ars£d lol and this telling my it installed but it still needs to install it is broken.
I appreciate that and I hope you get it fixed asap but i was referring to Franco's response about the ipv6 being broken and maybe the cause? Maybe I misunderstood.
Apologies, i should have quote replied
Quote from: Boxer on November 27, 2025, 07:51:18 PMQuote from: Baron_Backdoor on November 27, 2025, 07:37:09 PMQuote from: Boxer on November 27, 2025, 07:18:20 PMJust chiming in to say I'm getting intermittent packet loss on the ipv6 connectivity audit. I've done 3 audit checks. The first dropped all packets. the second dropped one packet and the third didn't drop any. I had no issues updating and I don't have any ipv6 issues outside of this audit.
Yeah i still have internet so wife can watch netflix happily i just don't like things broken or half-ars£d lol and this telling my it installed but it still needs to install it is broken.
I appreciate that and I hope you get it fixed asap but i was referring to Franco's response about the ipv6 being broken and maybe the cause? Maybe I misunderstood.
Apologies, i should have quote replied
No apology required :)
I just got into a reply roll, I think i've used the audit fuction a handfull of times but never the connection one so your experiance is better than mine
Try a different mirror perhaps. If pkg.opnsense.org is blocked somewhere that's obviously not very useful.
Cheers,
Franco
I guess it was repo issue then as today i got an alert on dashboard to do unfished updates.
Clickeed go and it connected (much faster than yesterday) I even saw in the Updates tab it did a cache clear which i've never seen it do.
Long and short ugrade completed so this can be closed off as clearly a blip.
I haven't seen or heard from any main mirror issues but if it's solved that's good.
Cheers,
Franco
I would like to bring to your attention an issue I encountered during a recent upgrade. Unfortunately, I lost all connection to the firewall before the reboot. This is the first time I've experienced such a situation in my six years of using OPNsense.
***GOT REQUEST TO UPDATE***
Currently running OPNsense 25.7.7_4 (amd64) at Fri Nov 28 12:58:02 AST 2025
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Checking for upgrades (118 candidates): .......... done
Processing candidates (118 candidates): .... done
The following 42 package(s) will be affected (of 0 checked):
New packages to be INSTALLED:
py311-pyopenssl: 25.3.0_1,1
Installed packages to be UPGRADED:
brotli: 1.1.0,1 -> 1.2.0,1
ca_root_nss: 3.117 -> 3.117_2
curl: 8.16.0 -> 8.17.0
libiconv: 1.17_1 -> 1.18_1
liblz4: 1.10.0,1 -> 1.10.0_2,1
nspr: 4.37 -> 4.38.2
nss: 3.117 -> 3.118.1
ntp: 4.2.8p18_4 -> 4.2.8p18_5
openvpn: 2.6.15 -> 2.6.16
opnsense: 25.7.7_4 -> 25.7.8
opnsense-update: 25.7.5_1 -> 25.7.8
pcre2: 10.46 -> 10.47
php83: 8.3.27 -> 8.3.28
php83-ctype: 8.3.27 -> 8.3.28
php83-curl: 8.3.27 -> 8.3.28
php83-dom: 8.3.27 -> 8.3.28
php83-filter: 8.3.27 -> 8.3.28
php83-gettext: 8.3.27 -> 8.3.28
php83-ldap: 8.3.27 -> 8.3.28
php83-mbstring: 8.3.27 -> 8.3.28
php83-pcntl: 8.3.27 -> 8.3.28
php83-pdo: 8.3.27 -> 8.3.28
php83-session: 8.3.27 -> 8.3.28
php83-simplexml: 8.3.27 -> 8.3.28
php83-sockets: 8.3.27 -> 8.3.28
php83-sqlite3: 8.3.27 -> 8.3.28
php83-xml: 8.3.27 -> 8.3.28
php83-zlib: 8.3.27 -> 8.3.28
pkcs11-helper: 1.29.0_3 -> 1.31.0
py311-aioquic: 1.3.0 -> 1.3.0_1
py311-cryptography: 44.0.3_4,1 -> 45.0.7_1,1
py311-dnspython: 2.8.0,1 -> 2.8.0_1,1
py311-numpy: 1.26.4_7,1 -> 1.26.4_10,1
py311-trio: 0.31.0 -> 0.32.0
py311-vici: 5.9.11_1 -> 6.0.3
qemu-guest-agent: 10.1.2 -> 10.1.2_1
readline: 8.2.13_2 -> 8.3.1
sqlite3: 3.50.4,1 -> 3.50.4_2,1
strongswan: 6.0.3 -> 6.0.3_1
sudo: 1.9.17p2_1 -> 1.9.17p2_2
zstd: 1.5.7 -> 1.5.7_1
Number of packages to be installed: 1
Number of packages to be upgraded: 41
The operation will free 1 MiB.
35 MiB to be downloaded.
[1/42] Fetching py311-cryptography-45.0.7_1,1.pkg: .......... done
[2/42] Fetching php83-filter-8.3.28.pkg: . done
[3/42] Fetching opnsense-update-25.7.8.pkg: . done
[4/42] Fetching php83-curl-8.3.28.pkg: . done
[5/42] Fetching py311-numpy-1.26.4_10,1.pkg: .......... done
[6/42] Fetching nss-3.118.1.pkg: .......... done
[7/42] Fetching libiconv-1.18_1.pkg: ......... done
[8/42] Fetching php83-ldap-8.3.28.pkg: ... done
[9/42] Fetching py311-aioquic-1.3.0_1.pkg: ....... done
[10/42] Fetching openvpn-2.6.16.pkg: ......... done
[11/42] Fetching php83-simplexml-8.3.28.pkg: . done
[12/42] Fetching php83-pdo-8.3.28.pkg: .. done
[13/42] Fetching ntp-4.2.8p18_5.pkg: ......... done
[14/42] Fetching php83-sockets-8.3.28.pkg: .. done
[15/42] Fetching php83-pcntl-8.3.28.pkg: . done
[16/42] Fetching ca_root_nss-3.117_2.pkg: .... done
[17/42] Fetching php83-sqlite3-8.3.28.pkg: .. done
[18/42] Fetching py311-vici-6.0.3.pkg: . done
[19/42] Fetching py311-trio-0.32.0.pkg: .......... done
[20/42] Fetching py311-dnspython-2.8.0_1,1.pkg: ....... done
[21/42] Fetching php83-session-8.3.28.pkg: . done
[22/42] Fetching php83-mbstring-8.3.28.pkg: .......... done
[23/42] Fetching php83-gettext-8.3.28.pkg: . done
[24/42] Fetching liblz4-1.10.0_2,1.pkg: ... done
[25/42] Fetching pkcs11-helper-1.31.0.pkg: .... done
[26/42] Fetching php83-zlib-8.3.28.pkg: . done
[27/42] Fetching zstd-1.5.7_1.pkg: ........ done
[28/42] Fetching pcre2-10.47.pkg: .......... done
[29/42] Fetching php83-ctype-8.3.28.pkg: . done
[30/42] Fetching brotli-1.2.0,1.pkg: ....... done
[31/42] Fetching curl-8.17.0.pkg: .......... done
[32/42] Fetching nspr-4.38.2.pkg: ......... done
[33/42] Fetching php83-8.3.28.pkg: .......... done
[34/42] Fetching php83-xml-8.3.28.pkg: . done
[35/42] Fetching php83-dom-8.3.28.pkg: .. done
[36/42] Fetching sqlite3-3.50.4_2,1.pkg: .......... done
[37/42] Fetching opnsense-25.7.8.pkg: .......... done
[38/42] Fetching qemu-guest-agent-10.1.2_1.pkg: ..... done
[39/42] Fetching readline-8.3.1.pkg: ......... done
[40/42] Fetching strongswan-6.0.3_1.pkg: .......... done
[41/42] Fetching sudo-1.9.17p2_2.pkg: ........ done
[42/42] Fetching py311-pyopenssl-25.3.0_1,1.pkg: .. done
Checking integrity... done (1 conflicting)
- py311-pyopenssl-25.3.0_1,1 conflicts with py311-openssl-25.0.0_1,1 on /usr/local/lib/python3.11/site-packages/OpenSSL/SSL.py
Checking integrity... done (0 conflicting)
Conflicts with the existing packages have been found.
One more solver iteration is needed to resolve them.
The following 43 package(s) will be affected (of 0 checked):
New packages to be INSTALLED:
py311-pyopenssl: 25.3.0_1,1
Installed packages to be UPGRADED:
brotli: 1.1.0,1 -> 1.2.0,1
ca_root_nss: 3.117 -> 3.117_2
curl: 8.16.0 -> 8.17.0
libiconv: 1.17_1 -> 1.18_1
liblz4: 1.10.0,1 -> 1.10.0_2,1
nspr: 4.37 -> 4.38.2
nss: 3.117 -> 3.118.1
ntp: 4.2.8p18_4 -> 4.2.8p18_5
openvpn: 2.6.15 -> 2.6.16
opnsense: 25.7.7_4 -> 25.7.8
opnsense-update: 25.7.5_1 -> 25.7.8
pcre2: 10.46 -> 10.47
php83: 8.3.27 -> 8.3.28
php83-ctype: 8.3.27 -> 8.3.28
php83-curl: 8.3.27 -> 8.3.28
php83-dom: 8.3.27 -> 8.3.28
php83-filter: 8.3.27 -> 8.3.28
php83-gettext: 8.3.27 -> 8.3.28
php83-ldap: 8.3.27 -> 8.3.28
php83-mbstring: 8.3.27 -> 8.3.28
php83-pcntl: 8.3.27 -> 8.3.28
php83-pdo: 8.3.27 -> 8.3.28
php83-session: 8.3.27 -> 8.3.28
php83-simplexml: 8.3.27 -> 8.3.28
php83-sockets: 8.3.27 -> 8.3.28
php83-sqlite3: 8.3.27 -> 8.3.28
php83-xml: 8.3.27 -> 8.3.28
php83-zlib: 8.3.27 -> 8.3.28
pkcs11-helper: 1.29.0_3 -> 1.31.0
py311-aioquic: 1.3.0 -> 1.3.0_1
py311-cryptography: 44.0.3_4,1 -> 45.0.7_1,1
py311-dnspython: 2.8.0,1 -> 2.8.0_1,1
py311-numpy: 1.26.4_7,1 -> 1.26.4_10,1
py311-trio: 0.31.0 -> 0.32.0
py311-vici: 5.9.11_1 -> 6.0.3
qemu-guest-agent: 10.1.2 -> 10.1.2_1
readline: 8.2.13_2 -> 8.3.1
sqlite3: 3.50.4,1 -> 3.50.4_2,1
strongswan: 6.0.3 -> 6.0.3_1
sudo: 1.9.17p2_1 -> 1.9.17p2_2
zstd: 1.5.7 -> 1.5.7_1
Installed packages to be REMOVED:
py311-openssl: 25.0.0_1,1
Number of packages to be removed: 1
Number of packages to be installed: 1
Number of packages to be upgraded: 41
The operation will free 2 MiB.
Checking integrity... done (0 conflicting)
[1/46] Upgrading brotli from 1.1.0,1 to 1.2.0,1...
[1/46] Extracting brotli-1.2.0,1: .......... done
[2/46] Upgrading libiconv from 1.17_1 to 1.18_1...
[2/46] Extracting libiconv-1.18_1: .......... done
[3/46] Upgrading nspr from 4.37 to 4.38.2...
[3/46] Extracting nspr-4.38.2: .......... done
[4/46] Upgrading pcre2 from 10.46 to 10.47...
[4/46] Extracting pcre2-10.47: .......... done
[5/46] Upgrading php83 from 8.3.27 to 8.3.28...
[5/46] Extracting php83-8.3.28: .......... done
[6/46] Upgrading php83-mbstring from 8.3.27 to 8.3.28...
[6/46] Extracting php83-mbstring-8.3.28: .......... done
[7/46] Upgrading pkcs11-helper from 1.29.0_3 to 1.31.0...
[7/46] Extracting pkcs11-helper-1.31.0: .......... done
[8/46] Upgrading qemu-guest-agent from 10.1.2 to 10.1.2_1...
[8/46] Extracting qemu-guest-agent-10.1.2_1: .......... done
[9/46] Upgrading readline from 8.2.13_2 to 8.3.1...
[9/46] Extracting readline-8.3.1: .......... done
[10/46] Upgrading sqlite3 from 3.50.4,1 to 3.50.4_2,1...
[10/46] Extracting sqlite3-3.50.4_2,1: .......... done
[11/46] Upgrading nss from 3.117 to 3.118.1...
[11/46] Extracting nss-3.118.1: .......... done
[12/46] Upgrading zstd from 1.5.7 to 1.5.7_1...
[12/46] Extracting zstd-1.5.7_1: .......... done
[13/46] Upgrading curl from 8.16.0 to 8.17.0...
[13/46] Extracting curl-8.17.0: .......... done
[14/46] Upgrading liblz4 from 1.10.0,1 to 1.10.0_2,1...
[14/46] Extracting liblz4-1.10.0_2,1: .......... done
[15/46] Deinstalling opnsense-25.7.7_4...
As can be seen, the moment I lost connection to the firewall was when "Deinstalling opnsense-25.7.7_4" was running.
These are the prompts when trying to access by console:
FreeBSD/amd64 (ACME-OPNsense-01.example.net) (ttyu0)
login: root
Password:
sh: /usr/local/libexec/opnsense-auth: not found
Login incorrect
login: root
Password:
sh: /usr/local/libexec/opnsense-auth: not found
Login incorrect
login:
After about 25 minutes, the interface came back online normally. It was just a brief moment of uncertainty, during which I was able to continue watching the upgrade process until it rebooted as expected. Below is a capture when it came back. I was unable to retrieve the last messages because the reboot prevented me from copying the output to the clipboard.
***GOT REQUEST TO UPDATE***
Currently running OPNsense 25.7.7_4 (amd64) at Fri Nov 28 12:58:02 AST 2025
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Checking for upgrades (118 candidates): .......... done
Processing candidates (118 candidates): .... done
The following 42 package(s) will be affected (of 0 checked):
New packages to be INSTALLED:
py311-pyopenssl: 25.3.0_1,1
Installed packages to be UPGRADED:
brotli: 1.1.0,1 -> 1.2.0,1
ca_root_nss: 3.117 -> 3.117_2
curl: 8.16.0 -> 8.17.0
libiconv: 1.17_1 -> 1.18_1
liblz4: 1.10.0,1 -> 1.10.0_2,1
nspr: 4.37 -> 4.38.2
nss: 3.117 -> 3.118.1
ntp: 4.2.8p18_4 -> 4.2.8p18_5
openvpn: 2.6.15 -> 2.6.16
opnsense: 25.7.7_4 -> 25.7.8
opnsense-update: 25.7.5_1 -> 25.7.8
pcre2: 10.46 -> 10.47
php83: 8.3.27 -> 8.3.28
php83-ctype: 8.3.27 -> 8.3.28
php83-curl: 8.3.27 -> 8.3.28
php83-dom: 8.3.27 -> 8.3.28
php83-filter: 8.3.27 -> 8.3.28
php83-gettext: 8.3.27 -> 8.3.28
php83-ldap: 8.3.27 -> 8.3.28
php83-mbstring: 8.3.27 -> 8.3.28
php83-pcntl: 8.3.27 -> 8.3.28
php83-pdo: 8.3.27 -> 8.3.28
php83-session: 8.3.27 -> 8.3.28
php83-simplexml: 8.3.27 -> 8.3.28
php83-sockets: 8.3.27 -> 8.3.28
php83-sqlite3: 8.3.27 -> 8.3.28
php83-xml: 8.3.27 -> 8.3.28
php83-zlib: 8.3.27 -> 8.3.28
pkcs11-helper: 1.29.0_3 -> 1.31.0
py311-aioquic: 1.3.0 -> 1.3.0_1
py311-cryptography: 44.0.3_4,1 -> 45.0.7_1,1
py311-dnspython: 2.8.0,1 -> 2.8.0_1,1
py311-numpy: 1.26.4_7,1 -> 1.26.4_10,1
py311-trio: 0.31.0 -> 0.32.0
py311-vici: 5.9.11_1 -> 6.0.3
qemu-guest-agent: 10.1.2 -> 10.1.2_1
readline: 8.2.13_2 -> 8.3.1
sqlite3: 3.50.4,1 -> 3.50.4_2,1
strongswan: 6.0.3 -> 6.0.3_1
sudo: 1.9.17p2_1 -> 1.9.17p2_2
zstd: 1.5.7 -> 1.5.7_1
Number of packages to be installed: 1
Number of packages to be upgraded: 41
The operation will free 1 MiB.
35 MiB to be downloaded.
[1/42] Fetching py311-cryptography-45.0.7_1,1.pkg: .......... done
[2/42] Fetching php83-filter-8.3.28.pkg: . done
[3/42] Fetching opnsense-update-25.7.8.pkg: . done
[4/42] Fetching php83-curl-8.3.28.pkg: . done
[5/42] Fetching py311-numpy-1.26.4_10,1.pkg: .......... done
[6/42] Fetching nss-3.118.1.pkg: .......... done
[7/42] Fetching libiconv-1.18_1.pkg: ......... done
[8/42] Fetching php83-ldap-8.3.28.pkg: ... done
[9/42] Fetching py311-aioquic-1.3.0_1.pkg: ....... done
[10/42] Fetching openvpn-2.6.16.pkg: ......... done
[11/42] Fetching php83-simplexml-8.3.28.pkg: . done
[12/42] Fetching php83-pdo-8.3.28.pkg: .. done
[13/42] Fetching ntp-4.2.8p18_5.pkg: ......... done
[14/42] Fetching php83-sockets-8.3.28.pkg: .. done
[15/42] Fetching php83-pcntl-8.3.28.pkg: . done
[16/42] Fetching ca_root_nss-3.117_2.pkg: .... done
[17/42] Fetching php83-sqlite3-8.3.28.pkg: .. done
[18/42] Fetching py311-vici-6.0.3.pkg: . done
[19/42] Fetching py311-trio-0.32.0.pkg: .......... done
[20/42] Fetching py311-dnspython-2.8.0_1,1.pkg: ....... done
[21/42] Fetching php83-session-8.3.28.pkg: . done
[22/42] Fetching php83-mbstring-8.3.28.pkg: .......... done
[23/42] Fetching php83-gettext-8.3.28.pkg: . done
[24/42] Fetching liblz4-1.10.0_2,1.pkg: ... done
[25/42] Fetching pkcs11-helper-1.31.0.pkg: .... done
[26/42] Fetching php83-zlib-8.3.28.pkg: . done
[27/42] Fetching zstd-1.5.7_1.pkg: ........ done
[28/42] Fetching pcre2-10.47.pkg: .......... done
[29/42] Fetching php83-ctype-8.3.28.pkg: . done
[30/42] Fetching brotli-1.2.0,1.pkg: ....... done
[31/42] Fetching curl-8.17.0.pkg: .......... done
[32/42] Fetching nspr-4.38.2.pkg: ......... done
[33/42] Fetching php83-8.3.28.pkg: .......... done
[34/42] Fetching php83-xml-8.3.28.pkg: . done
[35/42] Fetching php83-dom-8.3.28.pkg: .. done
[36/42] Fetching sqlite3-3.50.4_2,1.pkg: .......... done
[37/42] Fetching opnsense-25.7.8.pkg: .......... done
[38/42] Fetching qemu-guest-agent-10.1.2_1.pkg: ..... done
[39/42] Fetching readline-8.3.1.pkg: ......... done
[40/42] Fetching strongswan-6.0.3_1.pkg: .......... done
[41/42] Fetching sudo-1.9.17p2_2.pkg: ........ done
[42/42] Fetching py311-pyopenssl-25.3.0_1,1.pkg: .. done
Checking integrity... done (1 conflicting)
- py311-pyopenssl-25.3.0_1,1 conflicts with py311-openssl-25.0.0_1,1 on /usr/local/lib/python3.11/site-packages/OpenSSL/SSL.py
Checking integrity... done (0 conflicting)
Conflicts with the existing packages have been found.
One more solver iteration is needed to resolve them.
The following 43 package(s) will be affected (of 0 checked):
New packages to be INSTALLED:
py311-pyopenssl: 25.3.0_1,1
Installed packages to be UPGRADED:
brotli: 1.1.0,1 -> 1.2.0,1
ca_root_nss: 3.117 -> 3.117_2
curl: 8.16.0 -> 8.17.0
libiconv: 1.17_1 -> 1.18_1
liblz4: 1.10.0,1 -> 1.10.0_2,1
nspr: 4.37 -> 4.38.2
nss: 3.117 -> 3.118.1
ntp: 4.2.8p18_4 -> 4.2.8p18_5
openvpn: 2.6.15 -> 2.6.16
opnsense: 25.7.7_4 -> 25.7.8
opnsense-update: 25.7.5_1 -> 25.7.8
pcre2: 10.46 -> 10.47
php83: 8.3.27 -> 8.3.28
php83-ctype: 8.3.27 -> 8.3.28
php83-curl: 8.3.27 -> 8.3.28
php83-dom: 8.3.27 -> 8.3.28
php83-filter: 8.3.27 -> 8.3.28
php83-gettext: 8.3.27 -> 8.3.28
php83-ldap: 8.3.27 -> 8.3.28
php83-mbstring: 8.3.27 -> 8.3.28
php83-pcntl: 8.3.27 -> 8.3.28
php83-pdo: 8.3.27 -> 8.3.28
php83-session: 8.3.27 -> 8.3.28
php83-simplexml: 8.3.27 -> 8.3.28
php83-sockets: 8.3.27 -> 8.3.28
php83-sqlite3: 8.3.27 -> 8.3.28
php83-xml: 8.3.27 -> 8.3.28
php83-zlib: 8.3.27 -> 8.3.28
pkcs11-helper: 1.29.0_3 -> 1.31.0
py311-aioquic: 1.3.0 -> 1.3.0_1
py311-cryptography: 44.0.3_4,1 -> 45.0.7_1,1
py311-dnspython: 2.8.0,1 -> 2.8.0_1,1
py311-numpy: 1.26.4_7,1 -> 1.26.4_10,1
py311-trio: 0.31.0 -> 0.32.0
py311-vici: 5.9.11_1 -> 6.0.3
qemu-guest-agent: 10.1.2 -> 10.1.2_1
readline: 8.2.13_2 -> 8.3.1
sqlite3: 3.50.4,1 -> 3.50.4_2,1
strongswan: 6.0.3 -> 6.0.3_1
sudo: 1.9.17p2_1 -> 1.9.17p2_2
zstd: 1.5.7 -> 1.5.7_1
Installed packages to be REMOVED:
py311-openssl: 25.0.0_1,1
Number of packages to be removed: 1
Number of packages to be installed: 1
Number of packages to be upgraded: 41
The operation will free 2 MiB.
Checking integrity... done (0 conflicting)
[1/46] Upgrading brotli from 1.1.0,1 to 1.2.0,1...
[1/46] Extracting brotli-1.2.0,1: .......... done
[2/46] Upgrading libiconv from 1.17_1 to 1.18_1...
[2/46] Extracting libiconv-1.18_1: .......... done
[3/46] Upgrading nspr from 4.37 to 4.38.2...
[3/46] Extracting nspr-4.38.2: .......... done
[4/46] Upgrading pcre2 from 10.46 to 10.47...
[4/46] Extracting pcre2-10.47: .......... done
[5/46] Upgrading php83 from 8.3.27 to 8.3.28...
[5/46] Extracting php83-8.3.28: .......... done
[6/46] Upgrading php83-mbstring from 8.3.27 to 8.3.28...
[6/46] Extracting php83-mbstring-8.3.28: .......... done
[7/46] Upgrading pkcs11-helper from 1.29.0_3 to 1.31.0...
[7/46] Extracting pkcs11-helper-1.31.0: .......... done
[8/46] Upgrading qemu-guest-agent from 10.1.2 to 10.1.2_1...
[8/46] Extracting qemu-guest-agent-10.1.2_1: .......... done
[9/46] Upgrading readline from 8.2.13_2 to 8.3.1...
[9/46] Extracting readline-8.3.1: .......... done
[10/46] Upgrading sqlite3 from 3.50.4,1 to 3.50.4_2,1...
[10/46] Extracting sqlite3-3.50.4_2,1: .......... done
[11/46] Upgrading nss from 3.117 to 3.118.1...
[11/46] Extracting nss-3.118.1: .......... done
[12/46] Upgrading zstd from 1.5.7 to 1.5.7_1...
[12/46] Extracting zstd-1.5.7_1: .......... done
[13/46] Upgrading curl from 8.16.0 to 8.17.0...
[13/46] Extracting curl-8.17.0: .......... done
[14/46] Upgrading liblz4 from 1.10.0,1 to 1.10.0_2,1...
[14/46] Extracting liblz4-1.10.0_2,1: .......... done
[15/46] Deinstalling opnsense-25.7.7_4...
Stopping configd...done
Resetting root shell
Updating /etc/shells
Unhooking from /etc/rc
Unhooking from /etc/rc.shutdown
[15/46] Deleting files for opnsense-25.7.7_4: .......... done
[16/46] Upgrading ca_root_nss from 3.117 to 3.117_2...
[16/46] Extracting ca_root_nss-3.117_2: ..... done
[17/46] Upgrading ntp from 4.2.8p18_4 to 4.2.8p18_5...
[17/46] Extracting ntp-4.2.8p18_5: .......... done
[18/46] Upgrading openvpn from 2.6.15 to 2.6.16...
===> Creating groups
Using existing group 'openvpn'
===> Creating users
Using existing user 'openvpn'
[18/46] Extracting openvpn-2.6.16: .......... done
[19/46] Upgrading opnsense-update from 25.7.5_1 to 25.7.8...
[19/46] Extracting opnsense-update-25.7.8: .......... done
[20/46] Upgrading php83-ctype from 8.3.27 to 8.3.28...
[20/46] Extracting php83-ctype-8.3.28: ........ done
[21/46] Upgrading php83-curl from 8.3.27 to 8.3.28...
[21/46] Extracting php83-curl-8.3.28: .......... done
[22/46] Upgrading php83-dom from 8.3.27 to 8.3.28...
[22/46] Extracting php83-dom-8.3.28: .......... done
[23/46] Upgrading php83-filter from 8.3.27 to 8.3.28...
[23/46] Extracting php83-filter-8.3.28: ......... done
[24/46] Upgrading php83-gettext from 8.3.27 to 8.3.28...
[24/46] Extracting php83-gettext-8.3.28: ........ done
[25/46] Upgrading php83-ldap from 8.3.27 to 8.3.28...
[25/46] Extracting php83-ldap-8.3.28: ........ done
[26/46] Upgrading php83-pcntl from 8.3.27 to 8.3.28...
[26/46] Extracting php83-pcntl-8.3.28: ......... done
[27/46] Upgrading php83-pdo from 8.3.27 to 8.3.28...
[27/46] Extracting php83-pdo-8.3.28: .......... done
[28/46] Upgrading php83-session from 8.3.27 to 8.3.28...
[28/46] Extracting php83-session-8.3.28: .......... done
[29/46] Upgrading php83-simplexml from 8.3.27 to 8.3.28...
[29/46] Extracting php83-simplexml-8.3.28: ......... done
[30/46] Upgrading php83-sockets from 8.3.27 to 8.3.28...
[30/46] Extracting php83-sockets-8.3.28: .......... done
[31/46] Upgrading php83-sqlite3 from 8.3.27 to 8.3.28...
[31/46] Extracting php83-sqlite3-8.3.28: ......... done
[32/46] Upgrading php83-xml from 8.3.27 to 8.3.28...
[32/46] Extracting php83-xml-8.3.28: ......... done
[33/46] Upgrading php83-zlib from 8.3.27 to 8.3.28...
[33/46] Extracting php83-zlib-8.3.28: ........ done
[34/46] Upgrading py311-numpy from 1.26.4_7,1 to 1.26.4_10,1...
[34/46] Extracting py311-numpy-1.26.4_10,1: .......... done
[35/46] Upgrading py311-vici from 5.9.11_1 to 6.0.3...
[35/46] Extracting py311-vici-6.0.3: .......... done
[36/46] Upgrading strongswan from 6.0.3 to 6.0.3_1...
[36/46] Extracting strongswan-6.0.3_1: .......... done
[37/46] Upgrading sudo from 1.9.17p2_1 to 1.9.17p2_2...
[37/46] Extracting sudo-1.9.17p2_2: .......... done
[38/46] Deinstalling py311-dnspython-2.8.0,1...
[38/46] Deleting files for py311-dnspython-2.8.0,1: .......... done
[39/46] Upgrading py311-trio from 0.31.0 to 0.32.0...
[39/46] Extracting py311-trio-0.32.0: .......... done
[40/46] Deinstalling py311-aioquic-1.3.0...
[40/46] Deleting files for py311-aioquic-1.3.0: .......... done
[41/46] Deinstalling py311-openssl-25.0.0_1,1...
[41/46] Deleting files for py311-openssl-25.0.0_1,1: .......... done
[42/46] Upgrading py311-cryptography from 44.0.3_4,1 to 45.0.7_1,1...
[42/46] Extracting py311-cryptography-45.0.7_1,1: .......... done
[43/46] Installing py311-pyopenssl-25.3.0_1,1...
[43/46] Extracting py311-pyopenssl-25.3.0_1,1: .......... done
[44/46] Installing py311-aioquic-1.3.0_1...
[44/46] Extracting py311-aioquic-1.3.0_1: .......... done
[45/46] Installing py311-dnspython-2.8.0_1,1...
[45/46] Extracting py311-dnspython-2.8.0_1,1: .......... done
[46/46] Installing opnsense-25.7.8...
[46/46] Extracting opnsense-25.7.8: .......... done
Updating /etc/shells
Registering root shell
Hooking into /etc/rc
Hooking into /etc/rc.shutdown
Starting configd.
>>> Invoking update script 'refresh.sh'
Migrated OPNsense\Unbound\Unbound from 1.0.12 to 1.0.13
Flushing all caches...done.
Writing firmware settings: FreeBSD OPNsense
Writing trust files...done.
Scanning /usr/share/certs/untrusted for certificates...
Scanning /usr/share/certs/trusted for certificates...
Scanning /usr/local/share/certs for certificates...
certctl: No changes to trust store were made.
Writing trust bundles...done.
Configuring login behaviour...done.
Configuring cron...done.
Configuring system logging...done.
You may need to manually remove /usr/local/etc/ssl/cert.pem if it is no longer needed.
=====
Message from openvpn-2.6.16:
--
Note that OpenVPN now configures a separate user and group "openvpn",
which should be used instead of the NFS user "nobody"
when an unprivileged user account is desired.
It is advisable to review existing configuration files and
to consider adding/changing user openvpn and group openvpn.
=====
Message from strongswan-6.0.3_1:
--
The default strongSwan configuration interface have been updated to vici.
To use the stroke interface by default either compile the port without the vici option or
set 'strongswan_interface="stroke"' in your rc.conf file.
=====
Message from opnsense-25.7.8:
--
Some will win, some will lose, some are born to sing the blues
Checking integrity... done (0 conflicting)
Nothing to do.
Checking all packages: .......... done
The following package files will be deleted:
/var/cache/pkg/py311-cryptography-45.0.7_1,1~c815f3235b.pkg
/var/cache/pkg/php83-filter-8.3.28~4a8f33be7d.pkg
/var/cache/pkg/py311-cryptography-45.0.7_1,1.pkg
/var/cache/pkg/opnsense-update-25.7.8.pkg
/var/cache/pkg/php83-filter-8.3.28.pkg
/var/cache/pkg/opnsense-update-25.7.8~fee3f6a970.pkg
/var/cache/pkg/php83-curl-8.3.28~6accc1b1ac.pkg
/var/cache/pkg/py311-numpy-1.26.4_10,1.pkg
/var/cache/pkg/php83-curl-8.3.28.pkg
/var/cache/pkg/py311-numpy-1.26.4_10,1~448cb68ef2.pkg
/var/cache/pkg/nss-3.118.1~5ad385b9f3.pkg
/var/cache/pkg/libiconv-1.18_1.pkg
/var/cache/pkg/nss-3.118.1.pkg
/var/cache/pkg/libiconv-1.18_1~f25bb554f1.pkg
/var/cache/pkg/php83-ldap-8.3.28~8c8d10b5e9.pkg
/var/cache/pkg/py311-aioquic-1.3.0_1.pkg
/var/cache/pkg/php83-ldap-8.3.28.pkg
/var/cache/pkg/py311-aioquic-1.3.0_1~254dacaf7b.pkg
/var/cache/pkg/openvpn-2.6.16~4f8aacf57c.pkg
/var/cache/pkg/php83-pdo-8.3.28.pkg
/var/cache/pkg/openvpn-2.6.16.pkg
/var/cache/pkg/php83-simplexml-8.3.28~270147682b.pkg
/var/cache/pkg/php83-pdo-8.3.28~af0a7d61fb.pkg
/var/cache/pkg/php83-simplexml-8.3.28.pkg
/var/cache/pkg/ntp-4.2.8p18_5~53ce7b3a74.pkg
/var/cache/pkg/pcre2-10.47.pkg
/var/cache/pkg/php83-pcntl-8.3.28.pkg
/var/cache/pkg/ntp-4.2.8p18_5.pkg
/var/cache/pkg/php83-sockets-8.3.28~be778264e4.pkg
/var/cache/pkg/py311-vici-6.0.3~b2271437be.pkg
/var/cache/pkg/php83-sockets-8.3.28.pkg
/var/cache/pkg/php83-pcntl-8.3.28~93eff41d3d.pkg
/var/cache/pkg/ca_root_nss-3.117_2~f94361d547.pkg
/var/cache/pkg/ca_root_nss-3.117_2.pkg
/var/cache/pkg/php83-sqlite3-8.3.28~a9398ff640.pkg
/var/cache/pkg/php83-sqlite3-8.3.28.pkg
/var/cache/pkg/php83-session-8.3.28.pkg
/var/cache/pkg/py311-vici-6.0.3.pkg
/var/cache/pkg/py311-trio-0.32.0~379cd91a24.pkg
/var/cache/pkg/py311-trio-0.32.0.pkg
/var/cache/pkg/py311-dnspython-2.8.0_1,1~e877f271aa.pkg
/var/cache/pkg/php83-session-8.3.28~a99ce5be66.pkg
/var/cache/pkg/py311-dnspython-2.8.0_1,1.pkg
/var/cache/pkg/php83-mbstring-8.3.28~aea088c9f8.pkg
/var/cache/pkg/php83-mbstring-8.3.28.pkg
/var/cache/pkg/php83-gettext-8.3.28~f630bfacb2.pkg
/var/cache/pkg/php83-gettext-8.3.28.pkg
/var/cache/pkg/liblz4-1.10.0_2,1~665677c9bb.pkg
/var/cache/pkg/liblz4-1.10.0_2,1.pkg
/var/cache/pkg/pkcs11-helper-1.31.0~e98973b0f9.pkg
/var/cache/pkg/php83-zlib-8.3.28~0ace26b122.pkg
/var/cache/pkg/pkcs11-helper-1.31.0.pkg
/var/cache/pkg/zstd-1.5.7_1~788f890814.pkg
/var/cache/pkg/php83-zlib-8.3.28.pkg
/var/cache/pkg/zstd-1.5.7_1.pkg
/var/cache/pkg/pcre2-10.47~81f85770cc.pkg
/var/cache/pkg/php83-ctype-8.3.28~b4ea07e69e.pkg
/var/cache/pkg/php83-ctype-8.3.28.pkg
/var/cache/pkg/brotli-1.2.0,1~6e6393bc03.pkg
/var/cache/pkg/brotli-1.2.0,1.pkg
/var/cache/pkg/curl-8.17.0~0363fce9c2.pkg
/var/cache/pkg/curl-8.17.0.pkg
/var/cache/pkg/nspr-4.38.2~38753a629c.pkg
/var/cache/pkg/nspr-4.38.2.pkg
/var/cache/pkg/php83-8.3.28~9dc92cfc41.pkg
/var/cache/pkg/php83-xml-8.3.28~c5ef2658e7.pkg
/var/cache/pkg/php83-8.3.28.pkg
/var/cache/pkg/php83-xml-8.3.28.pkg
/var/cache/pkg/php83-dom-8.3.28~847af91472.pkg
/var/cache/pkg/php83-dom-8.3.28.pkg
/var/cache/pkg/sqlite3-3.50.4_2,1~3c97aae41e.pkg
/var/cache/pkg/sqlite3-3.50.4_2,1.pkg
/var/cache/pkg/opnsense-25.7.8~c4e566826f.pkg
/var/cache/pkg/opnsense-25.7.8.pkg
/var/cache/pkg/qemu-guest-agent-10.1.2_1~b37217a222.pkg
/var/cache/pkg/readline-8.3.1~f2b679163f.pkg
/var/cache/pkg/qemu-guest-agent-10.1.2_1.pkg
/var/cache/pkg/readline-8.3.1.pkg
/var/cache/pkg/strongswan-6.0.3_1~51975838ce.pkg
/var/cache/pkg/strongswan-6.0.3_1.pkg
/var/cache/pkg/sudo-1.9.17p2_2~c026b03dc3.pkg
/var/cache/pkg/sudo-1.9.17p2_2.pkg
/var/cache/pkg/py311-pyopenssl-25.3.0_1,1~d4e6f43fa1.pkg
/var/cache/pkg/py311-pyopenssl-25.3.0_1,1.pkg
The cleanup will free 35 MiB
Deleting files: .......... done
Nothing to do.
Starting web GUI...done.
Fetching base-25.7.8-amd64.txz: .............................. done
Fetching kernel-25.7.8-amd64.txz: ........ done
!!!!!!!!!!!! ATTENTION !!!!!!!!!!!!!!!
! A critical upgrade is in progress. !
! Please do not turn off the system. !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Installing kernel-25.7.8-amd64.txz... done
Installing base-25.7.8-amd64.txz...
I just wanted to share some thoughts regarding a specific behavior I've noticed. I believe it's important for anyone planning a maintenance window to be aware of this. It's not meant as criticism—on the contrary, I truly appreciate the great work the OPNsense team is doing!
If it's deemed appropriate, I encourage the team to evaluate this behavior for potential improvements. It could further enhance the already fantastic software we've come to rely on. Thank you for all your hard work, OPNsense team!
Hello, I will post here a similar update issue just for reference.
This past Nov. 26 I did performed an routine update from 25.7.7_4 through the dashboard and a Danger popup appeared during pkg files extraction/upgrade, the Danger popup disappeared itself after and I let the update to complete till system reboot.
OPNsense Update 25.7.8 Error Popup.jpg
Regardless of this Danger error popup, the system seems to success the operation, unfortunately I did not find anything useful related to the error and `dmesg` was clean after reboot.
OPNsense Update 25.7.8 Error and Continue.jpg
OPNsense Update 25.7.8 Completed 2.jpg
The Dashboard the [System:Firmware] page and the console all shows that the system upgrade have success regardless.
PS My system is a VM on ZFS so I always perform updates/upgrades under new ZFS/BE's, so trying to reproduce this can easy though haven't done that.
Also I perform min-version updates through the dashboard while major-version upgrades from the console to minimize errors but that's just me.
Regards
@Jose
same here, error message but update complete.
greetings
I was able to reproduce this on several new installs :
https://forum.opnsense.org/index.php?topic=49933.0
After waiting for a while, the upgrade completed just fine.
I'm also getting the "Danger" message.
The first time I saw it, it was during an upgrade from 25.7.7_4 to 25.7.8. Although the update completed, something had clearly gone wrong as nothing was stable after it rebooted (NOTE: you can't stop it from rebooting. The upgrade continues to complete, and then promptly reboots).
I decided to reinstall from the Installation Media (v25.7) and restore my config from backup. This all worked fine, and once I was happy it was stable, I proceeded to progress with the update (this time to 25.7.9, as it had been released by then).
Once again, during the update from 25.7 to 25.7.9, I again got the "Danger" message, and like before the update completed and rebooted. This time though, everything seems stable, so I've just left it in-situ.
Happy to provide logs if it can help determine the root cause.